Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File: mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier: DjW9+m7JFyzzursxihM6CmiLWsdZYJVIbo4vauFybss=
Subject key identifier: 66:3F:1A:CA:77:02:AC:22:4E:DC:C9:A3:A2:88:10:51:9E:AB:BC:2D
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 0199FC216B99759266CF94359D60F16D8312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=)
2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=)
3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: hVG4nCxRXMaY6ktcIHfbjLYyoVkT8c5YDS9rDtAvvZ4=)
4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=)
5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6b:99:75:92:66:cf:94:35:9d:60:f1:6d:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=663f1aca7702ac224edcc9a3a28810519eabbc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:d8:05:ed:a3:45:c6:32:10:09:d1:01:1e:
8c:c0:2a:9f:18:5f:92:b2:ae:1a:e3:fd:8d:06:77:
5e:3c:86:d8:1b:0f:cc:1b:95:88:da:61:b1:07:9c:
a1:e2:78:8c:b9:ab:2f:d4:7d:c0:f6:04:4a:51:53:
57:f2:a8:5e:b1:07:a5:3d:90:00:ba:13:0c:ea:73:
17:3e:58:18:5d:d5:39:78:d2:18:32:88:a9:25:80:
ae:9e:b0:8c:23:75:cf:9d:78:29:cb:11:4d:bd:aa:
8b:8d:24:af:40:52:44:7b:19:91:d0:8b:96:ed:64:
2d:13:ed:a4:6c:29:41:3c:e0:aa:9b:dd:08:9f:0d:
14:3a:ae:4a:d8:7f:6a:38:6d:a7:0d:39:f8:49:21:
fd:cb:20:6d:1c:81:b4:0c:98:2d:22:f0:89:b2:9f:
34:f9:3b:ec:f6:fb:95:b1:8f:40:cb:e3:90:78:2f:
6b:98:41:a5:66:7a:b0:fa:b5:68:19:9e:94:ff:90:
d4:80:ba:9c:d3:d5:f9:95:cd:f0:63:24:45:a3:3f:
11:4a:55:92:45:1f:1b:6d:66:7b:6b:a0:b3:33:82:
af:e7:de:bb:09:54:6f:b7:37:3c:de:7f:83:29:dd:
22:82:d2:f1:1b:9b:7e:d5:57:3b:40:d9:c4:3d:fb:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:1A:CA:77:02:AC:22:4E:DC:C9:A3:A2:88:10:51:9E:AB:BC:2D
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:66:cf:71:5b:11:8b:58:e4:8d:65:5d:38:07:b8:e8:e9:33:
61:a4:34:24:87:41:6c:bd:d3:d3:b1:54:a3:0c:46:89:85:35:
30:c1:85:7e:25:da:53:65:41:03:28:fc:17:0d:f8:2b:44:a2:
2b:d9:96:0e:65:3c:19:98:b7:83:f7:e8:d9:f2:e0:40:3b:1a:
57:ee:9c:88:0f:ba:ef:35:75:1d:36:a7:36:c5:b9:24:4c:1d:
66:92:0f:6c:ff:50:31:0c:33:f1:a7:d3:58:51:37:4f:f9:a7:
32:28:5f:fa:96:4d:05:ce:73:7b:eb:b4:5b:f1:69:99:e8:24:
81:9c:02:73:cf:90:7c:9d:0b:02:36:28:32:e8:ec:32:0a:97:
0c:81:0a:2f:5d:39:44:de:a5:f5:c1:d6:5a:33:35:6f:f9:01:
44:1a:67:24:4b:0d:f3:67:1d:09:49:cd:ab:d2:81:06:cc:63:
9e:21:5a:a7:f9:31:d5:71:35:dd:3e:d4:cc:52:fe:c7:62:97:
05:d5:e4:27:a1:d1:51:a5:c8:66:5f:e7:27:01:f0:be:d3:99:
1b:fa:89:e4:96:41:31:58:ab:43:75:f6:f9:54:1f:30:62:0e:
eb:6f:5b:30:3b:8e:80:10:9a:7b:46:9d:71:e4:9d:df:e3:c5:
35:71:e5:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWuZdZJmz5Q1nWDxbYMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz
NmM0NWEwHhcNMjUxMDE5MTEwMTEyWhcNMjUxMDIwMTEwMTEyWjAzMTEwLwYDVQQD
Eyg2NjNmMWFjYTc3MDJhYzIyNGVkY2M5YTNhMjg4MTA1MTllYWJiYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSfYBe2jRcYyEAnRAR6MwCqfGF+S
sq4a4/2NBndePIbYGw/MG5WI2mGxB5yh4niMuasv1H3A9gRKUVNX8qhesQelPZAA
uhMM6nMXPlgYXdU5eNIYMoipJYCunrCMI3XPnXgpyxFNvaqLjSSvQFJEexmR0IuW
7WQtE+2kbClBPOCqm90Inw0UOq5K2H9qOG2nDTn4SSH9yyBtHIG0DJgtIvCJsp80
+Tvs9vuVsY9Ay+OQeC9rmEGlZnqw+rVoGZ6U/5DUgLqc09X5lc3wYyRFoz8RSlWS
RR8bbWZ7a6CzM4Kv5967CVRvtzc83n+DKd0igtLxG5t+1Vc7QNnEPfvFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY/Gsp3AqwiTtzJo6KIEFGeq7wtMB8GA1UdIwQY
MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt
MTM5OWEyODIyMjdhLzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh
LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWbPcVsR
i1jkjWVdOAe46OkzYaQ0JIdBbL3T07FUowxGiYU1MMGFfiXaU2VBAyj8Fw34K0Si
K9mWDmU8GZi3g/fo2fLgQDsaV+6ciA+67zV1HTanNsW5JEwdZpIPbP9QMQwz8afT
WFE3T/mnMihf+pZNBc5ze+u0W/FpmegkgZwCc8+QfJ0LAjYoMujsMgqXDIEKL105
RN6l9cHWWjM1b/kBRBpnJEsN82cdCUnNq9KBBsxjniFap/kx1XE13T7UzFL+x2KX
BdXkJ6HRUaXIZl/nJwHwvtOZG/qJ5JZBMVirQ3X2+VQfMGIO629bMDuOgBCae0ad
ceSd3+PFNXHltQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:06 2025 by rpki-client